Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a9edb3b-0ca3-36c7-bec3-71eda7b7ac43.roa
File:                     0a9edb3b-0ca3-36c7-bec3-71eda7b7ac43.roa (raw, json)
Hash identifier:          RPH7Q3yqFLTa1Qv06DPboJGypo8UaZGWLt14/ptWWPw=
Subject key identifier:   0C:53:1C:A0:C3:D6:AA:B0:63:C7:1D:67:C4:3B:C4:2E:A3:9C:F4:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A883F4C8F4CEEE08D00980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a9edb3b-0ca3-36c7-bec3-71eda7b7ac43.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     701
IP address blocks:        216.2.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:83:f4:c8:f4:ce:ee:08:d0:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=65026ebc-4685-49b0-8185-27f40c32cf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:ad:b8:b9:10:7f:f3:6c:ab:58:f6:cd:95:
                    19:87:20:84:7f:6f:68:08:92:e9:3e:7f:b3:94:6e:
                    59:3e:f4:21:ea:81:a5:f7:ed:25:5e:4f:1f:47:d8:
                    d5:d1:e6:bc:d6:fe:71:ed:79:ac:5f:32:2b:e8:b8:
                    e6:a1:ba:b3:09:63:df:2a:8b:e5:1f:15:0c:68:d7:
                    ce:bb:a9:ac:3e:5e:85:cb:b3:c1:2c:31:1c:4d:c3:
                    77:9a:28:7b:1d:8e:88:96:49:1a:a1:bf:57:6f:76:
                    2c:72:62:be:14:dc:b5:c8:f2:df:db:a9:93:92:1f:
                    b1:3d:81:16:b2:a7:f2:06:c4:ba:fb:2b:c2:39:8e:
                    ff:bf:a7:15:ec:84:38:d1:16:80:9c:d8:bc:9b:35:
                    45:34:8c:6e:86:2a:e7:ca:03:5f:c4:7d:e1:12:77:
                    8b:30:f8:5d:18:17:98:0d:34:54:05:a2:5f:bb:aa:
                    1c:b9:cc:a7:b8:ff:f2:34:e1:f8:79:00:7a:f0:c1:
                    32:f8:31:d5:86:b2:5b:31:ac:cc:0c:86:ea:fa:a2:
                    15:92:08:73:af:7b:31:3d:1d:79:f5:65:ba:dc:90:
                    5e:76:04:68:32:36:61:be:ab:d4:75:86:6a:02:34:
                    e4:36:c3:fc:02:0a:91:cb:ed:1d:05:3b:5c:e1:4a:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:53:1C:A0:C3:D6:AA:B0:63:C7:1D:67:C4:3B:C4:2E:A3:9C:F4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a9edb3b-0ca3-36c7-bec3-71eda7b7ac43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.2.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:7a:c6:7b:9e:13:a5:e2:fe:3c:af:c5:c5:53:11:3d:3f:
         89:8b:eb:ca:c1:ac:e3:f1:05:78:b0:8e:4a:b8:81:ef:aa:0e:
         3a:6f:ea:84:81:e4:b6:50:08:ad:e4:2f:22:5e:ce:d3:ae:8f:
         7c:c2:1a:83:23:da:4d:45:ab:c5:76:b9:3f:2a:5c:40:bd:df:
         14:09:e6:ca:88:50:23:99:ea:d6:f2:6b:a9:33:13:db:eb:05:
         0b:1e:26:64:c1:0f:8a:5c:c2:89:3f:4a:5d:19:98:08:70:95:
         ba:2f:1c:6f:de:56:03:a6:48:a8:7c:cd:9a:f8:81:bc:56:99:
         33:8c:80:85:12:05:4a:49:ff:4a:d0:57:0c:46:92:3f:ed:ed:
         f0:c0:ce:5d:f8:a0:39:8f:18:d0:7d:1a:9b:80:d0:6b:1d:75:
         56:4f:b8:5c:c9:65:fd:cd:1d:f5:c5:ce:7c:5e:fb:49:20:c7:
         e6:ad:55:4f:d8:5c:0d:9b:b6:a8:ae:be:c3:fc:4c:fd:3b:0e:
         d1:48:2f:46:d8:a4:c7:7e:85:aa:2f:ab:85:4a:23:b2:aa:5e:
         1f:b6:b3:2c:94:13:cf:90:47:7d:84:db:47:03:5e:b7:b3:5f:
         76:18:80:96:50:88:77:47:e3:0f:ec:66:61:3e:e2:3b:bd:27:
         46:82:de:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:57:43 2026 by rpki-client